SERVER-WEBAPP Zoho ManageEngine OpManager SQL injection attempt

IPS-NPA

9 SIDs: 66308, 66309, 66310, 66311, 66312, 66313, 66317, 66318, 66319

Description

Detects an attempt to exploit CVE-2018-18949, CVE-2021-40493, and CVE-2021-41288, a SQL injection flaw that can let operators read or modify the application's database in Zoho ManageEngine OpManager.

CVEs

CVE-2021-41288 CVE-2021-40493 CVE-2018-18949